See also #719776 #719774 #719780 #719776 (not linked yet by intention. I leave it up to Security to link it)
can we stop this by disabling html attachments?
There is https://bugs.gentoo.org/721008 to track the spam and mgorny has an extension we are looking ot deploy to reduce spam on bugzilla.